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CLAIMS 

What is claimed is: 

1 1 . An authentication method comprising: 

2 generating an initialization vector at a first electronic device; 

3 determining at the first electronic device whether the initialization vector falls 

4 within a first group of initialization vectors, the first group includes a plurality of 

5 initialization vectors solely used in connection with an authentication sequence; and 

6 encrypting information using in part the initialization vector for return to a 

7 second electronic device if the initialization vector falls within the first group. 

1 2. The authentication method of claim 1, wherein the first electronic device 

3 2 is a wireless unit. 
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{f\ 1 3. The authentication method of claim 1, wherein the second electronic 

Sfi 2 device is an access point. 
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l~ 1 4. The authentication method of claim 1, wherein prior to generating the 

2 initialization vector, the method comprises receiving the information from the second 

f U 3 electronic device by the first electronic device. 
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pi 5. The authentication method of claim 4, wherein the information is a 

2 challenge text. 

1 6. The authentication method of claim 5, wherein the challenge text is a 

2 first sequence of bits and the initialization vector is a second sequence of bits produced 

3 by a number generator. 

1 7. The authentication method of claim 4, wherein the number generator is a 

2 pseudo-random number generator. 

1 8. The authentication method of claim 1 further comprising regenerating an 

2 initialization vector if the initialization vector fails to fall within the first group. 
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1 9. The authentication method of claim 1, wherein the determining whether 

2 the initialization vector falls within the first group includes determining whether a 

3 selected series of bits of the initialization vector has been set. 

1 10. The authentication method of claim 9, wherein the selected series of bits 

2 is continuous. 

1 11. The authentication method of claim 5, wherein prior to receiving the 

2 challenge text, the method further comprises negotiating a shared secret key between 

3 the first electronic device and the second electronic device. 

1 12. The authentication method of claim 1 1 , wherein the encrypting of the 

^3 2 information includes 

3 combining the initialization vector with the shared secret key; and 

4 repeatedly performing bitwise Exclusive-OR (XOR) operations on the challenge 

fU 5 text using a combination of the initialization vector with the shared secret key. 

fU 

si 13. The authentication method of claim 5 further comprising: 

?y 2 transmitting both the encrypted challenge text and the initialization vector to the 

l Jt 3 second electronic device; 

l.s-3 

□ 4 decrypting the encrypted challenge text using both the initialization vector and a 

; S 

5 prestored copy of the shared secret key to recover a challenge text; and 

6 comparing the recovered challenge text with the challenge text. 

1 14. A method for authenticating a wireless unit in communications with an 

2 access point, comprising: 

3 transmitting a challenge text from the access point to the wireless unit; 

4 receiving an encrypted challenge text and an initialization vector from the 

5 wireless unit; 

6 decrypting the encrypted challenge text using both the initialization vector and a 

7 pre-stored copy of a shared secret key to recover a challenge text; and 

8 comparing the recovered challenge text with the challenge text previously 

9 transmitted to the wireless unit. 
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15. The method of claim 14, wherein the challenge text is a first sequence of 

bits. 

16. The method of claim 15, wherein the initialization vector is a second 
sequence of bits produced by a number generator. 

17. The method of claim 16, wherein the number generator is a pseudo- 
random number generator. 

18. The method of claim 14, wherein prior to transmitting the challenge text, 
the method further comprises negotiating the shared secret key between the access 
point and the wireless unit. 

19. The method of claim 14, wherein the decrypting of the encrypted 
challenge text includes 

combining the initialization vector with the shared secret key; and 
using a combination of the initialization vector and the shared secret key as a 
key material loaded to decrypt the encrypted challenge text. 

20. A method comprising: 

selecting a bit size (N) of an initialization vector; 

partitioning all 2 N initialization vectors into a first group and a second group; 
using an initialization vector from the first group exclusively for authentication; 

and 

using an initialization vector from the second group exclusively for data 
communications. 

21 . The method of claim 20, wherein the authentication is Wired Equivalent 
Privacy (WEP) authentication in accordance with Institute of Electrical and Electronics 
Engineers (IEEE) 802.11. 
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22. The method of claim 20, wherein a first predetermined number of 
initialization vectors associated with the first group is substantially less than a second 
predetermined number of initialization vectors associated with the second group. 
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23. The method of claim 20, wherein the data communications include 
wired equivalent privacy (WEP) encryption and WEP decryption operations. 

24. An electronic device comprising: 

a memory to contain a plurality of keys including a shared secret key; 
a number generator; 

a device management logic in communication with the memory and the number 
generator, the device management logic including 

logic configured to analyze an initialization vector generated from the 
number generator to determine whether the initialization vector is used for either wired 
authentication or data communications; and 

a wireless transceiver to transmit and receive information for configured to 
support the authentication. 

25. The electronic device of claim 24, wherein the authentication is Wired 
Equivalent Privacy (WEP) authentication. 

26. The electronic device of claim 24 is an access point. 

27. An electronic device comprising: 
means for generating an initialization vector; 

means for determining whether the initialization vector falls within a first group 
of initialization vectors, the first group includes a plurality of initialization vectors 
solely used in connection with an authentication sequence; and 

means for encrypting information using the initialization vector for return to a 
source for the information using in part the initialization vector if the initialization 
vector falls within the first group. 

28. A software module implemented for execution by an electronic device, 
the software module comprising: 

a first module to select a bit size (N) of an initialization vector; 
a second module to partition all 2 N initialization vectors into a first group and a 
second group; 
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a third module to use an initialization vector from the first group exclusively for 
authentication; and 

a fourth module to use an initialization vector from the second group 
exclusively for data communications. 



